Your Name d58b706799 security: implement Phase 1 & partial Phase 2 improvements ...

- Remove hardcoded admin password, use env var or auto-generate
- Fix trustHost to be conditional (Vercel-only by default)
- Add HTTP security headers (CSP, X-Frame-Options, HSTS)
- Create middleware.ts to activate existing rate limiting
- Implement structured logging system
- Rewrite error handling in ai-cad service
- Update security documentation

2026-05-05 22:49:57 +08:00

..

index.ts

security: implement Phase 1 & partial Phase 2 improvements

2026-05-05 22:49:57 +08:00